Manager Central Hub Bot
One-tap passwordless sign-in for executives across three internal dashboards
A compact security-focused Telegram bot: verified executives run /start and see three buttons, each opening one of the company's internal dashboards via a short-lived one-time token.
The problem
Executives had to remember three separate dashboard URLs and static passwords, which ended up shared in team chats and created security exposure.
What we built
Telegram ID/username allowlist check (unauthorized users receive complete silence) followed by short-lived one-time JWT sign-in links — no static passwords stored or shared.
Highlights
- Telegram ID & username allowlist with zero response to unauthorized users
- Short-lived one-time JWT sign-in tokens instead of static passwords
- Lightweight FastAPI + Docker deployment
Passwords required for managers
Zero
Dashboard sign-in
One tap in Telegram
Shared static passwords
Replaced by one-time tokens